Phishing
Attackers have used *.box.com to store malicious files and then share them with targets.
Exfiltration
*.box.com can be used to store exfiltrated files on there.
Download
*.box.com creates shared links for files which enables attackers to store tools there and download them when required.
Created: 2021-11-10
Last Update: 2021-11-10
Credits: mr.d0x